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DETAILED ACTION 

1. Claims 1-63 are currently presented and have been examined. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs 
of 35 U.S.C. 102 that form the basis for the rejections under 
this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or 
a foreign country or in public use or on sale in this country, more than one 
year prior to the date of application for patent in the United States. 

Claims 1, 3, 6-9, 19-21, 28, 30, 33-36, 46, 48, and 51-54 
are rejected under 35 U.S.C. 102(b) as being anticipated by 
''Request for Comments 2866: RADIUS Accounting" ("RFC 2866"). 

Regarding claim 1, ''RFC 28 66" discloses a method for 
maintaining a common session identifier in a network, 
comprising : 

providing a session identifier to an off-load server 
("forwarding server"), (pages 9, section 2.3, "Proxy", 
specifically "1. The NAS sends an accounting-request to the 
forwarding server"; pages 15-16, section 5.5, "Acct-Session-Id", 
specifically "An Accounting-Request packet MUST have an Acct- 
Session-Id") 

Regarding claim 3, "RFC 28 66" discloses the method recited 
in Claim 1, wherein providing the session identifier further 
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comprises providing the session identifier in a session setup 
request ("Accounting Request" or "Accounting Start") . (page 4, 
section 2. "Operation", specifically "When a client is 
configured to use RADIUS accounting, at the start of service 
delivery it will generate an Accounting start packet...") 

Regarding claim 6, "RFC 2866" discloses the method recited 
in Claim 1, further comprising associating a start record with 
the session identifier, (page 4, section 2. "Operation", 
specifically "When a client is configured to use RADIUS 
accounting, at the start of service delivery it will generate an 
Accounting start packet...") 

Regarding claim 7, "RFC 28 66" discloses the method recited 
in Claim 6, further comprising providing the start record to a 
software module ("RADIUS Accounting server") that provides for 
performing accounting processing, (page 4, section 2. 
"Operation", specifically "When a client is configured to use 
RADIUS accounting, at the start of service delivery it will 
generate an Accounting start packet... and will send that to the 
RADIUS Accounting server...") 

Regarding claim 8, "RFC 28 66" discloses the method recited 
in Claim 1, further comprising associating a stop record with 
the session identifier, (page 4, section 2. "Operation", 
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specifically "At the end of service delivery the client will 
generate an Accounting Stop packet...") 

Regarding claim 9, "RFC 28 66" discloses the method recited 
in Claim 8, further comprising providing the stop record to a 
software module that provides for performing accounting 
processing, (page 4, section 2. "Operation", specifically "At 
the end of service delivery the client will generate an 
Accounting Stop packet... It will send [the packet] to the RADIUS 
Accounting server...") 

Regarding claim 19, "RFC 2866" discloses a system, 
comprising : 

a network access server, wherein the network access server 
is configured to generate a session identifier, the network 
access server being further configured to provide the session 
identifier to an off load server, (page 9, section 2.3, "Proxy", 
specifically "1. The NAS sends an accounting-request to the 
forwarding server"; pages 15-16, section 5.5, "Acct-Session-Id", 
specifically "An Accounting-Request packet MUST have an Acct- 
Session-Id") 

Regarding claim 20, "RFC 2866" discloses the system recited 
in Claim 19, further comprising: 

an off-load server ("forwarding server") , the off-load 
server being coupled to receive the session identifier from 
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the network access server, (page 9, section 2.3, ''Proxy", 
specifically ''1. The NAS sends an accounting-request to the 
forwarding server"; pages 15-16, section 5.5, "Acct-Session-Id", 
specifically "An Accounting-Request packet MUST have an Acct- 
Session-Id") 

Regarding claim 21, "RFC 2866" discloses the system recited 
in Claim 19, further comprising a software module that is 
configured to perform authentication, the software module being 
further configured to receive the session identifier from the 
network access server, (pages 8-9, section 2.3, "Proxy", 
specifically on page 8, "one RADIUS server receives and 
authentication (or accounting) request..." and on page 9, "A 
RADIUS server can function as both a forwarding server and a 
remote server...","!. The NAS sends an accounting-request to the 
forwarding server", "2. The forwarding server forwards the 
access request to the remote server.") 

Claims 28, 30, and 33-36 are also rejected since these 
claims recite an apparatus that contain substantially the same 
limitations as recited in claims 1, 3, and 6-9 respectively. 

Claims 46, 48, and 51-54 are also rejected since these 
claims recite a computer program product that contain 
substantially the same limitations as recited in claims 1, 3, 
and 6-9 respectively. 
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2. Claims 10-12, 37-39, and 55-57 are rejected under 35 
U.S.C. 102(b) as being anticipated by "Request for Comments 
2867: RADIUS Accounting Modifications for Tunnel Protocol 
Support" ("RFC 2867") 

Regarding claim 10, "RFC 2867" discloses a method for 
maintaining a common session identifier in a network, 
comprising : 

determining whether the session identifier value is 
provided by an access server ("NAS") (page 2, section 2, 
"Implementation Notes", specifically the paragraph beginning "In 
auditing, the User-Name. . .") ; and 

assigning, if the session identifier value is not provided 
by the access server, the session identifier value, (page 2, 
section 2, "Implementation Notes", specifically the paragraph 
beginning "In auditing, the User-Name..."; page 7, section 4.1, 
"Acct -Tunnel -Connection", specifically "It SHOULD be included in 
Accounting-Request packets which contain an Acct-Status-Type 
attribute having the value Start... or any of the values 
described above. This attribute .. .may be used to provide a means 
to uniquely identify a tunnel session for auditing purposes") 

Regarding claim 11, "RFC 2867" discloses the method recited 
in Claim 10, further comprising: 

inspecting a parameter list ("String") for the session 
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identifier value, (page 1, section 4.1, "Acct -Tunnel - 
Connection", specifically the paragraph denoted ''String") 
Regarding claim 12, "RFC 28 67" discloses the method recited in 
Claim 10, wherein: 

determining whether the session identifier value is 
provided by the access server further comprises determining 
whether the session identifier value is contained within a non- 
required parameter string provided by the access server, (page 
2, section 2, "Implementation Notes", specifically the paragraph 
beginning "In auditing, the User-Name...") 

Regarding claim 12, "RFC 2867" discloses the method recited 
in Claim 10, wherein determining whether the session identifier 
value is provided by the access server further comprises 
determining whether the session identifier value is contained 
within a non-required parameter string provided by the access 
server (page 7, section 4.1, "Acct-Tunnel-Connection", 
specifically the paragraph denoted "String") . 

Claims 37-39 and 55-57 are also rejected since these claims 
recite an apparatus and a computer program product which contain 
substantially the same limitations as recited in claims 10-12 
respectively. 

Claim Rejections - 35 USC § 103 
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The following is a quotation of 35 U.S.C. 103 (a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

(a) A patent may not be obtained though the invention is not identically 
disclosed or described as set forth in section 102 of this title, if the 
differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere 

Co., 383 U.S. 1, 148 USPQ 459 (1966), that are applied for 

establishing a background for determining obviousness under 35 

U.S.C. 103(a) are summarized as follows: 

1. Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and 
the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent 
art . 

4. Considering objective evidence present in the 
application indicating obviousness or nonobviousness . 

This application currently names joint inventors. In 

considering patentability of the claims under 35 U.S.C. 103(a), 

the examiner presumes that the subject matter of the various 

claims was commonly owned at the time any inventions covered 

therein were made absent any evidence to the contrary. 

Applicant is advised of the obligation under 37 CFR 1.56 to 

point out the inventor and invention dates of each claim that 

was not commonly owned at the time a later invention was made in 
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order for the examiner to consider the applicability of 35 
U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) prior 
art under 35 U.S.C. 103(a). 

3. Claims 2, 4-5, 29, 31-32, 47, and 49-50 are rejected under 
35 U.S.C. 103(a) as being unpatentable over "RFC 2866" in view 
of "RFC 2867". 

Regarding claim 2, "RFC 2866" discloses the method recited 
in Claim 1 . 

"RFC 2866" does not expressly disclose wherein providing 
the session identifier further comprises providing the session 
identifier as a non-required parameter in accordance with a 
tunnel protocol, however, "RFC 28 66" does disclose providing the 
session identifier as shown above. 

"RFC 2867" discloses providing the session identifier as a 
non-required parameter in accordance with a tunnel protocol 
(page 2, section 2, "Implementation Notes", specifically the 
paragraph beginning "In auditing, the User-Name...") 

It would have been obvious to one of ordinary skill in the 
art at the time the invention was made to combine the teachings 
of both references since "RFC 2867" expressly discloses that the 
disclosures within are an improvement over the teachings of "RFC 
2866" in that "RFC 2867" enables the support of tunneling 
protocols used in the teachings of "RFC 2866" (page 1, section 
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Abstract) . Therefore, one of ordinary skill would have 
appreciated the specific advantages that "RFC 2867" provides to 
the teachings of "RFC 2866" and would have been motivated to 
combine the teachings of the references. 

Regarding claim 4, "RFC 28 66" discloses the method recited 
in Claim 1 . 

"RFC 2866" does not expressly disclose determining whether 
the session identifier is provided as a non-required parameter 
in accordance with a tunnel protocol, however, "RFC 28 67" does 
disclose these limitations (page 2, section 2, "Implementation 
Notes", specifically the paragraph beginning "In auditing, the 
User-Name . . . ") 

Claim 4 is rejected since the motivations regarding the 
obviousness of claim 2 also apply to claim 4. 

Regarding claim 5, "RFC 2866" and "RFC 2867" disclose the 
method recited in Claim 4 . 

"RFC 2866" does not expressly disclose assigning, if the 
session identifier is not provided, a session identifier, 
however, "RFC 2867" does disclose this limitation (page 2, 
section 2, "Implementation Notes", specifically the paragraph 
beginning "In auditing, the User-Name..."; page 1, section 4.1, 
"Acct-Tunnel-Connection", specifically "It SHOULD be included in 
Accounting-Request packets which contain an Acct-Status-Type 
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attribute having the value Start... or any of the values 
described above. This attribute .may be used to provide a means 
to uniquely identify a tunnel session for auditing purposes") 

Claim 5 is rejected since the motivations regarding the 
obviousness of claim 2 also apply to claim 5. 

Claims 29 and 31-32 are also rejected since these claims 
recite an apparatus that contain substantially the same 
limitations as recited in claims 2 and 4-5 respectively. 

Claims 47 and 49-50 are also rejected since these claims 
recite a computer program product that contain substantially the 
same limitations as recited in claims 2 and 4-5 respectively. 
4. Claims 13-18, 22, 40-45, and 58-63 are rejected under 35 
U.S.C. 103(a) as being unpatentable over ''RFC 2867" in view of 
"RFC 28 66". 

Regarding claim 13, "RFC 2867" discloses the method recited 
in Claim 10. 

"RFC 2867" does not expressly disclose associating a start 
record with the session identifier, however, "RFC 2867" does 
disclose providing the session identifier to an access server 
(page 2, section 2, "Implementation Notes", the paragraph 
beginning "In auditing, the User-Name...", specifically 
"Accounting Request") . 
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"RFC 28 66" discloses associating a start record with the 
session identifier (page 4, section 2 "Operation", specifically 
"When a client is configured to use RADIUS accounting, at the 
start of service delivery it will generate an Accounting start 
packet ---"). 

It would have been obvious to one of ordinary skill in the 
art at the time the invention was made to combine the teachings 
of both references since "RFC 2867" discloses that "RFC 2866" 
contains teachings that are contemplated to be combined with the 
teachings of "RFC 2867" (page 1, Abstract) . Therefore, one of 
ordinary skill would have been motivated to combine the 
teachings of the references since both references, based on the 
express reference made by "RFC 2867" to "RFC 2866" and based on 
their use of the RADIUS method, would be considered to be 
analogous art based on their related fields of endeavor and 
equivalents useful for the same purpose. See MPEP 2141.01(a) and 
2144.06. 

Regarding claim 14, "RFC 2867" and "RFC 2866" disclose the 
method recited in Claim 13. 

"RFC 28 67" does not expressly disclose providing the start 
record to a software module that provides for performing 
accounting processing, however, "RFC 2866" does disclose this 
limitation (page 4, section 2. "Operation", specifically "When a 
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client is configured to use RADIUS accounting, at the start of 
service delivery it will generate an Accounting start 
packet... and will send that to the RADIUS Accounting 
server. . . ") . 

Claim 14 is rejected since the motivations regarding the 
obviousness of claim 13 also apply to claim 14. 

Regarding claim 15, "RFC 2867" and "RFC 2866" disclose the 
method recited in Claim 10. 

"RFC 2867" does not expressly disclose associating a stop 
record with the session identifier, however, "RFC 28 66" does 
disclose this limitation (page 4, section 2. "Operation", 
specifically "At the end of service delivery the client will 
generate an Accounting Stop packet..."). 

Claim 15 is rejected since the motivations regarding the 
obviousness of claim 13 also apply to claim 15. 

Regarding claim 16, "RFC 2867" and "RFC 2866" discloses the 
method recited in Claim 15. 

"RFC 28 67" does not expressly disclose providing the stop 
record to a software module that provides for performing 
accounting processing, however, "RFC 28 66" does disclose this 
limitation (page 4, section 2. "Operation", specifically "At the 
end of service delivery the client will generate an Accounting 
Stop packet... It will send [the packet] to the RADIUS Accounting 
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server- . . ") 

Claim 16 is rejected since the motivations regarding the 
obviousness of claim 13 also apply to claim 16. 

Regarding claim 17, ''RFC 2867" and ''RFC 2866" disclose the 
method recited in Claim 10. 

''RFC 2867" does not expressly disclose providing the 
session identifier from the access server to an off-load server, 
however, "RFC 2866" does disclose this limitation (page 9, 
section 2.3, "Proxy", specifically "1. The NAS sends an 
accounting-request to the forwarding server"; pages 15-16, 
section 5.5, "Acct-Session-Id", specifically "An Accounting- 
Request packet MUST have an Acct- Session- Id") . 

Claim 17 is rejected since the motivations regarding the 
obviousness of claim 13 also apply to claim 17. 

Regarding claim 18, "RFC 2867" and "RFC 2866" disclose the 
method recited in Claim 17. 

"RFC 2867" discloses wherein providing the session 
identifier further comprises providing the session identifier as 
a non-required parameter in accordance with a tunnel protocol, 
(page 2, section 2, "Implementation Notes", specifically the 
paragraph beginning "In auditing, the User-Name...") 

Regarding claim 22, "RFC 28 66" discloses the system recited 
in Claim 19. 



Application/Control Number: 09/965,932 Page 15 

Art Unit: 2143 

"RFC 28 66" does not expressly disclose wherein the network 
access server is further configured to provide the session in a 
non-required parameter list according to a tunnel protocol, 
however, "RFC 2867" does disclose these limitations (page 2, 
section 2, "Implementation Notes", specifically the paragraph 
beginning "In auditing, the User-Name...") 

Claim 22 is rejected since the motivations regarding the 
obviousness of claim 2 also apply to claim 22. 

Claims 40-45 and 58-63 are also rejected since these claims 
recite an apparatus and computer program product that contain 
substantially the same limitations as recited in claims 13-18. 

Conclusion 

The prior art made of record and not relied upon is 
considered pertinent to applicant's disclosure. 

The following prior art discloses the state of the art in 
RADIUS or AAA accounting servers: 

US Patent 6 070 192 to Holt et al; 

US Patent 6 151 628 to Xu et al; 

US Patent 6 377 982 to Rai et al ; 

US Patent 6 405 251 to Bullard et al; 

US Patent 6 430 619 to Sitaraman et al; 

US Patent 6 446 200 to Ball et al; 

US Patent 6 560 217 to Peirce et al; 
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US Patent 6 614 80 9 to Verma et al ; 

US Patent 6 625 657 to Bullard; 

US Patent 6 751 663 to Farrell et al; 

US Patent Application Publication 2002/0046277 to Barna et 

al; 

US Patent Application Publication 2002/0069278 to Forslow; 

US Patent Application Publication 2002/0091636 to Bullard; 

Rigney, C. et al . "Request for Comments (RFC) 2865: Remote 
Authentication Dial In User Service (RADIUS)"/ published by 
Network Working Group, June 2000, 76 pages. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to George C. 
Neurauter, Jr. whose telephone number is (571) 272-3918. The 
examiner can normally be reached on Monday through Friday from 
9AM to 5:30PM Eastern. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, David Wiley can be 
reached on (571) 272-3923. The fax phone number for the 
organization where this application or proceeding is assigned is 
703-872-9306. 
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Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 
(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . 
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